hahnhuhn | 19.08.2016 15:49 | PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus Moin zusammen,
ich habe mir vermutlich beim Installieren von zusätzlichen Schriftarten dieses "PC Cleaner Plus" eingefangen. Nach der Suche auf der Trojaner-Board-Seite habe ich eine kurze Vorgehensweise-Anleitung gefunden.
Malewarebyte hat mit 186 Funden angeschlagen. Muß wohl noch mehr dabei sein
Hier das Log: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlaufdatum: 19.08.2016
Suchlaufzeit: 15:17
Protokolldatei: 20160819_mwb.txt
Administrator: Ja
Version: 2.2.1.1043
Malware-Datenbank: v2016.08.19.05
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Anke
Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 469439
Abgelaufene Zeit: 32 Min., 38 Sek.
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 1
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\em.exe, 9228, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6]
Module: 1
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\isxdl.dll, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6],
Registrierungsschlüssel: 26
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC Clean Plus_is1, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\advancedpccare.net, In Quarantäne, [fbf6014b2f6b43f33eeb8f4642c17b85],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [8f620745673372c4472572522fd4936d],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A293460-13E8-4E50-9AC4-292E204AF2AF}, Löschen bei Neustart, [11e0d3798e0c3afce6eb8868748f5ea2],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{90C17893-0B99-4B86-8B77-6B186D15956B}, In Quarantäne, [23ce56f64e4c83b32ea23ab69a69ab55],
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DF2EE38D-F8D5-4BE6-846B-8301F2F23CCA}, Löschen bei Neustart, [24cdfb51f4a62a0c9fff9a35659f31cf],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F6FA16A8-5350-4104-A453-AAC92D2AF36C}, Löschen bei Neustart, [60917dcfedad112568699a56c24136ca],
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Advanced-PC-Care_Logon, Löschen bei Neustart, [737edd6fe6b4eb4bb9e7656a62a22bd5],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus, Löschen bei Neustart, [36bb2725cfcb91a5ad69e00961a256aa],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus_DEFAULT, Löschen bei Neustart, [3cb55af2029845f182945990e51e1ae6],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus_UPDATES, Löschen bei Neustart, [f6fbd478f0aabe78070fab3e15eefc04],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\Jawego, In Quarantäne, [6d8490bc99014bebbfa7e4183dc612ee],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\PC Clean Plus, In Quarantäne, [de138fbd37633501a0888c5d22e1b64a],
PUP.Optional.SecurePCCleaner, HKLM\SOFTWARE\WOW6432NODE\EVENT MONITOR, In Quarantäne, [c52ce7658f0b2b0b7deb0cf0a65df40c],
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [6e8319335347bb7b13598c38af54d030],
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\PC\CLEAN\Plus, In Quarantäne, [1fd270dc1e7ccb6b89a0a148ce3540c0],
PUP.Optional.AdvancedPCCare, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\advancedpccare.net, In Quarantäne, [37baa9a3a5f5da5c70b88c49986b7e82],
PUP.Optional.InstallCore, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\csastats, In Quarantäne, [14ddbd8fb8e268ceb6ffb842c53e6997],
PUP.Optional.SecurePCCleaner, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\Event Monitor, In Quarantäne, [e50c3c10623844f28fd8fffd48bbe818],
PUP.Optional.InstallCore, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\ICSW1.22, In Quarantäne, [8071e369e9b1bb7bd1648423f40f0000],
PUP.Optional.PCCleanPlus, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PC Clean Plus, In Quarantäne, [b93883c96931b680e0467178867db64a],
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [25ccbf8de9b1ad89d1dc9a0237cc6997],
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [06eb52fa2575e74ffe6db50f11f2df21],
PUP.Optional.PCCleanPlus, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PC\CLEAN\Plus, In Quarantäne, [0ce5bd8fbae0e94d0027e1081ce755ab],
PUP.Optional.ProductSetup, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PRODUCTSETUP, In Quarantäne, [b23fa3a9cdcd73c3fcee0aa640c349b7],
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\B7A64AC7-B828-4D74-98B2-097AFA836948_is1, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
Registrierungswerte: 11
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f[8f620745673372c4472572522fd4936d]D4%26b[8f620745673372c4472572522fd4936d]DIE%26cc[8f620745673372c4472572522fd4936d]Dde%26pa[8f620745673372c4472572522fd4936d]DWinYahoo%26cd[8f620745673372c4472572522fd4936d]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[8f620745673372c4472572522fd4936d]D679763744%26a[8f620745673372c4472572522fd4936d]Dwny_ir_16_32_dopc%26os_ver[8f620745673372c4472572522fd4936d]D10.0%26os[8f620745673372c4472572522fd4936d]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A293460-13E8-4E50-9AC4-292E204AF2AF}|Path, \PC Clean Plus_UPDATES, Löschen bei Neustart, [11e0d3798e0c3afce6eb8868748f5ea2]
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{90C17893-0B99-4B86-8B77-6B186D15956B}|Path, \PC Clean Plus, In Quarantäne, [23ce56f64e4c83b32ea23ab69a69ab55]
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DF2EE38D-F8D5-4BE6-846B-8301F2F23CCA}|Path, \Advanced-PC-Care_Logon, Löschen bei Neustart, [24cdfb51f4a62a0c9fff9a35659f31cf]
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F6FA16A8-5350-4104-A453-AAC92D2AF36C}|Path, \PC Clean Plus_DEFAULT, Löschen bei Neustart, [60917dcfedad112568699a56c24136ca]
PUP.Optional.SecurePCCleaner, HKLM\SOFTWARE\WOW6432NODE\EVENT MONITOR|TELNO, (844) 763-5838, In Quarantäne, [c52ce7658f0b2b0b7deb0cf0a65df40c]
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f[6e8319335347bb7b13598c38af54d030]D4%26b[6e8319335347bb7b13598c38af54d030]DIE%26cc[6e8319335347bb7b13598c38af54d030]Dde%26pa[6e8319335347bb7b13598c38af54d030]DWinYahoo%26cd[6e8319335347bb7b13598c38af54d030]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[6e8319335347bb7b13598c38af54d030]D679763744%26a[6e8319335347bb7b13598c38af54d030]Dwny_ir_16_32_dopc%26os_ver[6e8319335347bb7b13598c38af54d030]D10.0%26os[6e8319335347bb7b13598c38af54d030]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, hxxp://www.bing.com/search?pc=COSP&ptag=D081216-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}, In Quarantäne, [25ccbf8de9b1ad89d1dc9a0237cc6997]
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURL, hxxp://www.bing.com/search?pc=COSP&ptag=D081216-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}, In Quarantäne, [747d1339cfcb5adc525b0399847ff60a]
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f[06eb52fa2575e74ffe6db50f11f2df21]D4%26b[06eb52fa2575e74ffe6db50f11f2df21]DIE%26cc[06eb52fa2575e74ffe6db50f11f2df21]Dde%26pa[06eb52fa2575e74ffe6db50f11f2df21]DWinYahoo%26cd[06eb52fa2575e74ffe6db50f11f2df21]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[06eb52fa2575e74ffe6db50f11f2df21]D679763744%26a[06eb52fa2575e74ffe6db50f11f2df21]Dwny_ir_16_32_dopc%26os_ver[06eb52fa2575e74ffe6db50f11f2df21]D10.0%26os[06eb52fa2575e74ffe6db50f11f2df21]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.ProductSetup, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PRODUCTSETUP|tb, 0O1T1J1R1C2Z0B1K2U, In Quarantäne, [b23fa3a9cdcd73c3fcee0aa640c349b7]
Registrierungsdaten: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DWindowsGut: (hxxp://www.google.com)B10Gut: (hxxp://www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
Ordner: 18
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice\de, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\smico, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x64, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x86, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6],
Dateien: 125
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\efo.exe, In Quarantäne, [5c9567e59dfd9b9b7c769dc214ecca36],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\PCCleanPlus.exe, In Quarantäne, [fdf41933d3c766d04143543c2cd51ee2],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\ExcludeList.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\backup3.bin, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\backup6.bin, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\German_pcp.dat, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\irnsc.txt, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-14-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-15-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-16-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-17-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-19-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\pcpupdate.ini, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\results.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\TempHLList.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice\de\voice.wav, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62],
PUP.Optional.PCCleanPlus, C:\Users\Public\Desktop\PC Clean Plus.lnk, In Quarantäne, [80714b01c0da37ff5bb76e7b19ea19e7],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.dat, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Italian_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Chinese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Danish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Dutch_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\emsetup.exe, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\eng_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\FileList.pcp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Finnish_pcp_fi.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\French_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\German_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\greek_pcp_el.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\install_left_image.bmp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\isxdl.dll, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Japanese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\korean_pcp_ko.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Norwegian_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\polish_pcp_pl.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\portugese_pcp_pt.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Portuguese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\RegList.pcp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\russian_pcp_ru.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Spanish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Swedish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\TraditionalCn_pcp_zh-tw.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\turkish_pcp_tr.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.exe, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.msg, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\xmllite.dll, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b],
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus, In Quarantäne, [ac455eee4e4c63d349cb89606a9954ac],
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus_DEFAULT, In Quarantäne, [bd342d1f0e8c9b9b9f750adf808325db],
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus_UPDATES, In Quarantäne, [d021fe4ed3c74cea64b0ce1b42c1ad53],
PUP.Optional.PCCleanPlus, C:\Windows\Tasks\PC Clean Plus_DEFAULT.job, In Quarantäne, [42af67e5a7f3e74f01145693f40f09f7],
PUP.Optional.PCCleanPlus, C:\Windows\Tasks\PC Clean Plus_UPDATES.job, In Quarantäne, [6c85b3994e4c42f4fe17e90071929868],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\efo.exe.config, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\danish_efo_da.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\Dutch_efo_nl.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\english_efo_en.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\finish_efo_fi.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\French_efo_fr.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\german_efo_de.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\italian_efo_it.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\japanese_efo_ja.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\norwegian_efo_no.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\portuguese_efo_ptbr.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\russian_efo_ru.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\spanish_efo_es.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\swedish_efo_sv.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a],
PUP.Optional.AdvancedPCCare, C:\Users\Public\Desktop\Advanced-PC-Care.lnk, In Quarantäne, [549de06cf8a286b06f4066686a9a40c0],
PUP.Optional.AdvancedPCCare, C:\Windows\System32\Tasks\Advanced-PC-Care_Logon, In Quarantäne, [e9084a02524812240a973699877d41bf],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apc.db, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcsrv.exe, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcstartrepair_de.mp3, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcstartrepair_en.mp3, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\voice.ini, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\Errorlog.txt, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\exlist.bin, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\res.xml, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\srv.xml, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868],
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\PC Clean Plus entfernen.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f],
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\PC Clean Plus.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f],
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\Register PC Clean Plus.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\apc.exe, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\apc.exe.config, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\ApcEng.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\AppRes.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\HtmlRenderer.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\HtmlRenderer.WinForms.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\Interop.IWshRuntimeLibrary.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\NAudio.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\System.Data.SQLite.DLL, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\TAFactory.IconPack.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\TaskScheduler.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.dat, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.exe, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.msg, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\danish_apc_da.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\Dutch_apc_nl.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\english_apc_en.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\finish_apc_fi.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\French_apc_fr.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\german_apc_de.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\italian_apc_it.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\japanese_apc_ja.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\norwegian_apc_no.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\portuguese_apc_ptbr.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\russian_apc_ru.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\spanish_apc_es.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\swedish_apc_sv.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x64\SQLite.Interop.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x86\SQLite.Interop.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7],
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care\Advanced-PC-Care.lnk, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef],
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care\kaufen Advanced-PC-Care.lnk, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\update.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\em.exe, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\eng_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\French_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\German_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\ininotfound0.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\ininotfound2.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\isxdl.dll, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\japan_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\log_08-14-2016.log, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\log_08-15-2016.log, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6],
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_), Ersetzt,[e01172da4a500f2765554e51be461ae6]
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc¶m1=1¶m2=fErsetzt,[747dc389d7c3b482ceed049b6f9556aa]D1%26bErsetzt,[747dc389d7c3b482ceed049b6f9556aa]DFirefox%26ccErsetzt,[747dc389d7c3b482ceed049b6f9556aa]Dde%26paErsetzt,[747dc389d7c3b482ceed049b6f9556aa]DWinYahoo), %5
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\searchplugins\yahoo! powered search.xml, In Quarantäne, [638eb29af9a1be786f79e7b4857fac54],
Physische Sektoren: 0
(keine bösartigen Elemente erkannt)
(end) habe die Bedrohungen in die Quarantäne geschickt und Notebook neu gestartet.
AdwClean intalliert und auch hier das Log: Code:
# AdwCleaner v6.000 - Bericht erstellt am 19/08/2016 um 16:34:56
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-08-19.1 [Server]
# Betriebssystem : Windows 10 Home (X64)
# Benutzername : Anke - ANKE-PC
# Gestartet von : F:\Eigene Dokumente von Anke\Notebook\Software\Trojander Board\AdwCleaner\adwcleaner_6.000.exe
# Modus: Suchlauf
# Unterstützung : https://toolslib.net/forum
***** [ Dienste ] *****
Dienst Gefunden: LavasoftTcpService
Dienst Gefunden: WCAssistantService
***** [ Ordner ] *****
Ordner Gefunden: C:\Users\Anke\AppData\Roaming\lavasoft\web companion
Ordner Gefunden: C:\ProgramData\lavasoft\web companion
Ordner Gefunden: C:\ProgramData\Application Data\lavasoft\web companion
Ordner Gefunden: C:\Program Files (x86)\lavasoft\web companion
***** [ Dateien ] *****
Datei Gefunden: C:\WINDOWS\SysNative\LavasoftTcpService64.dll
Datei Gefunden: C:\WINDOWS\SysNative\LavasoftTcpServiceOff.ini
Datei Gefunden: C:\WINDOWS\SysWOW64\lavasofttcpservice.dll
Datei Gefunden: C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini
***** [ DLL ] *****
Keine infizierten DLLs gefunden.
***** [ WMI ] *****
Keine schädlichen Schlüssel gefunden.
***** [ Verknüpfungen ] *****
Keine infizierten Verknüpfungen gefunden.
***** [ Aufgabenplanung ] *****
Aufgabe Gefunden: RunAtStartup
Aufgabe Gefunden: RunAtStartup
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
Schlüssel Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1000\Software\Myfree Codec
Schlüssel Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1001\Software\PC
Schlüssel Gefunden: HKCU\Software\PC
Schlüssel Gefunden: HKLM\SOFTWARE\PC
Schlüssel Gefunden: HKLM\SOFTWARE\Lavasoft\Web Companion
Wert Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1001\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Wert Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Schlüssel Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Internetbrowser ] *****
Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [2097 Bytes] - [21/12/2015 13:06:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [1841 Bytes] - [21/12/2015 12:54:47]
C:\AdwCleaner\AdwCleaner[S2].txt - [4539 Bytes] - [19/08/2016 16:34:56]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [4612 Bytes] ########## komisch kommt mir vor, daß ich gar nicht das komplette Fenster von AdwCleaner angezeigt bekomme, nach der Hälfte wird das Fenster abgeschnitten.
(alles was unter "Ergebnisse" angezeigt wird "Dienste","Ordner","Dateien"... sehe ich gar nicht mehr.
Könnt Ihr mir bitte weiterhelfen. Danke |